jackin-checkout-pr

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: No malicious patterns were detected. The skill uses standard developer tools to perform common repository tasks and checks.
  • [COMMAND_EXECUTION]: The skill executes gh pr checkout and git commands. These are consistent with the skill's purpose and include user confirmation steps for merged or closed pull requests. The skill also enforces a clean working tree before execution, which is a security best practice for repository management.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses a standard attack surface for indirect instructions via pull request identifiers.
  • Ingestion points: Input accepted via the argument-hint in SKILL.md (PR number, URL, branch).
  • Boundary markers: None present; the skill treats the input as a direct argument for CLI tools.
  • Capability inventory: Uses gh CLI for checkout and repository metadata viewing.
  • Sanitization: Relies on the standard GitHub CLI (gh) argument validation. This is considered safe and consistent with the skill's primary function.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 05:10 AM
Security Audit — agent-trust-hub — jackin-checkout-pr